target/arm: Fix physical address resolution for Stage2